Privacy Policy

This Privacy Policy defines how Ajyal Fintech Solution LLC (“Wafir”, “we”, “us”) collects, processes, stores, protects, and disposes of the personal and financial data of our users in the State of Qatar.

We adhere to the fundamental principles of data privacy: lawfulness, fairness, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

This policy applies to all personal data collected through the Wafir mobile application, the corporate website (wafir.app), customer support interactions, and our integrations with banking and credit reporting partners in Qatar.

This policy is owned and maintained by the Wafir Data Protection & Compliance Office and is reviewed annually or whenever regulatory directives from the Qatar Central Bank are updated.

We only collect personal information that is necessary to verify your identity, evaluate financial eligibility, and administer savings circles. Categories of data collected include:

• Identification Data: Full name, Qatar ID (QID) number, date of birth, nationality, and live facial biometric verification.

• Contact Data: Qatari mobile phone number, residential address (National Address Certificate), and email address.

• Financial & Employment Data: Employer name, monthly salary certificate, bank account IBAN, and credit history records obtained via explicit consent from the Qatar Credit Bureau.

• Technical & Usage Data: IP address, device model, operating system, and secure app transaction logs.

Personal data is processed strictly for the following legitimate purposes:

1. Performing regulatory eKYC, identity authentication, and anti-money laundering (AML/CFT) verification.

2. Assessing financial eligibility and assigning appropriate monthly circle limits.

3. Facilitating electronic payments, managing segregated bank escrow accounts, and executing monthly payouts.

4. Fulfilling mandatory reporting requirements to the Qatar Central Bank and the Qatar Credit Bureau.

5. Providing secure customer service and communicating essential circle updates.

Wafir does not sell, rent, or monetize your personal data under any circumstances.

Data may only be shared with authorized entities under strict confidentiality and legal agreements, including:

• Licensed Qatari Partner Banks: For managing segregated escrow accounts and processing automated payouts.

• Qatar Credit Bureau: For authorized credit assessment and payment history documentation.

• Regulatory & Judicial Authorities: When strictly mandated by Qatar Central Bank regulations or valid court orders.

We implement enterprise-grade security controls including end-to-end encryption (AES-256 in transit and at rest), multi-factor authentication, and isolated data storage within secure Qatari data centers.

Personal and transactional data is retained for the duration of the client relationship plus the mandatory statutory retention period prescribed by Qatar financial and AML regulations (typically 5 to 10 years).

Upon expiry of statutory retention requirements, data is securely erased or anonymized using irreversible cryptographic methods.

Under Qatar Data Privacy Law and applicable standards, you possess the right to:

• Request access to the personal data we hold about you.

• Request the rectification of inaccurate or outdated personal information.

• Object to or request the restriction of processing, subject to statutory and contractual obligations.

• Lodge a formal inquiry or privacy complaint by contacting our Data Protection Officer at privacy@wafir.app.